cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4037
Views
15
Helpful
5
Comments
Gerson Fabian Morales Marin
Community Member

 

Configuration

1- Go to System > Server (Modify the IP with the FQDN)

FQDN= (Hostname+domain)

G

 

2- Access the "CLI" on the PUB and configure the correct hostname using the following command

 "set network hostname <hostname>"
Note= This command regenerates the certificates due the network change.

x

aa

Note= Make sure DNS is already set for hostname resolution

Link= http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/install/10_0_1/ipchange/CUCM_BK_C3782AAB_00_change-ipaddress-hostname-100/CUCM_BK_C3782AAB_00_change-ipaddress-hostname-100_chapter_011.html#CUCM_TK_C1134AB2_00

3- Reboot the server. Command

"utils system restart"
Note= Make sure to schedule a maintenance window or apply the change after business hours.

4- When the server comes back on line go to the CLI and verify the new information using the following commands:

CLI Verification after hostname change

4.a "show myself" (This command will show us the correct hostname)

Machine Name    : PBCMPUB01 ----> New hostname
account name    : admin
privilege level : 4
command count   : disabled
logging setting : disabled

 

4.b "show network eth0 details" (This command will show us the correct domain name)

Ethernet 0
DHCP         : disabled           Status     : up
IP Address   : 132.158.245.200    IP Mask    : 255.255.255.000
Link Detected: yes                Mode       : Auto disabled, Full, 10000 Mbits/s
Duplicate IP : no
Queue Length : 1000               MTU        : 1500
MAC Address  : 00:50:56:aa:2b:db

RX stats:
  bytes   :    146277020   packets :       262474   errors :            0
  dropped :            0   overrun :            0   mcast  :         6002

TX stats:
  bytes   :     40968236   packets :       224571   errors :            0
  dropped :            0   carrier :            0   colsns :            0

DNS
Primary      : 132.158.49.2       Secondary  : 132.158.127.210
Options      : timeout:5 attempts:2
Domain       : cisco.test.com
Gateway      : 132.158.245.254 on Ethernet 0

 

+++Notice that now we have the complete FQDN in use       "PBCMPUB01.cisco.test.com"+++

-The last step will be check that the certificate shows up the correct information from the new parameters added above.

Check Certificates

4.c "show web-security"

[Version: V3

  Serial Number: 75BC0A26FEDB173956069BF44B98B99E

  SignatureAlgorithm: SHA1withRSA (1.2.840.113549.1.1.5)

  Issuer Name: L=Palm Bay, ST=Florida, CN=PBCMPUB01.cisco.test.com, OU=NSO, O=Cisco Corp, C=US

  Validity From: Mon Aug 10 14:32:57 EDT 2015

           To:   Sat Aug 08 14:32:56 EDT 2020

  Subject Name: L=Palm Bay, ST=Florida, CN=PBCMPUB01.cisco.test.com, OU=NSO, O=Cisco Corp, C=US

  Key: RSA (1.2.840.113549.1.1.1)

    Key value: 3082010a028201010097d840ebce927a1f6c88cafe5d7afe2e633c3d844187d

  [ Extension: KeyUsage (OID.2.5.29.15)

     Critical: false

     Usages: digitalSignature, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign,

Press <enter> for 1 line, <space> for one page, or <q> to quit

  ]

  [

   Extension: ExtKeyUsageSyntax (OID.2.5.29.37)

     Critical: false

     Usage oids: 1.3.6.1.5.5.7.3.1, 1.3.6.1.5.5.7.3.2, 1.3.6.1.5.5.7.3.5,

  ]

  [

     Extension: SubjectKeyIdentifier (OID.2.5.29.14)

     Critical: false

     keyID: 87b435fa1faa5f2cc3aadea9b0181b04b6786cdb

  ]

 Signature:

  0000: 0d 7d 2a 94 c3 92 c9 9b 83 cd ba 07 73 e5 49 b7 [.}*.........s.I.]

  0010: 6b 39 cc 93 5f 7d 70 61 76 cf e1 dd 6f f6 da 49 [k9.._}pav...o..I]

  0020: 4d 5b 4b 1c e6 b4 c2 a3 91 61 3a 39 fa 3f d5 59 [M[K......a:9.?.Y]

  0030: b0 ef c4 77 e5 35 b3 34 94 6a 3e f8 96 dc 6c b2 [...w.5.4.j>...l.]

  0040: ff 8d 48 49 70 02 08 1c 27 44 56 1b 18 36 b9 8c [..HIp...'DV..6..]

  0050: af 53 57 a3 83 6a 73 e9 a9 ff 1b 34 f7 72 37 bd [.SW..js....4.r7.]

  0070: bf 18 6e 8c dd 1e 7b 2d 37 73 0c e7 58 87 b0 2f [..n...{-7s..X../]

  0080: ab dd 7e e7 b4 c7 76 92 29 68 54 ad 4b 6e db 43 [..~...v.)hT.Kn.C]

  0090: 83 a4 27 cb 30 22 44 03 94 c6 83 db b2 ab 60 9a [..'.0"D.......`.]

Press <enter> for 1 line, <space> for one page, or <q> to quit

 00b0: 0c 40 9e 23 a6 77 93 86 fc 7c a5 b1 29 92 49 cb [.@.#.w...|..).I.]

  00c0: 84 ab 3a 18 39 6b 12 1e 34 2a 53 38 0c 70 b8 68 [..:.9k..4*S8.p.h]

  00d0: 40 f9 4a 1e 63 f2 ac bc 67 4f 22 f6 06 07 58 e6 [@.J.c...gO"...X.]

  00e0: 22 61 7b 64 8e 4a d1 c2 84 27 da b5 c9 7b e9 bf ["a{d.J...'...{..]

  00f0: dc 4e 65 01 c5 28 7d f1 d0 c0 80 d3 c8 06 84 61 [.Ne..(}........a]

Certificate Information

5

 

Notice that the Serial Number has to match.
Relates links

https://supportforums.cisco.com/discussion/12402346/cucm-and-imp-ip-address-fqdn

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/install/9_1_1/ipchange/ipchg911.html#wp68037

 

-I hope this information can help you to addressed  your concerns about making this change in the future.

 

Regards,

Gerson Morales (gersomor)

 

 

 

 

 

 

 

Comments
Aman Soi
VIP Alumni
VIP Alumni

[+5] Nice DOC.

regds,

aman

Nice doc.


What about if you just need to change IP to FQDN on CUCM System>Server Page?


Our CUCMs OS are already configured with correct hostnames and domain names.


I don’t think that we need to reload the servers.

Regards.

Gerson Fabian Morales Marin
Community Member

Hello Frank,

Thank for checking. What is important here is that when you run the "show myself" command and "show network eth0 details" commands both show the correct information.

For "show myself" command the correct "hostname"

For "show network eth0 details" the correct domain name.

-Changing the name of the sever does not require a reboot.

Regards,

Gerson Morales

Hi Gerson,

thank you.

We did the change and we didn't have any issue (DB errors etc...). As well, you don't need to reset the phones/MGCP gateways: they will keep the old settings based on IP and not names (FQDN). On the next reset, they will list the CUCM FQDNs.

I would just remind the folks, that before they go for this modification, they should verify that the servers, the phones and the MGCP Voice Gateways are able to resolve the names in IP.

Frank.

Found this doc helpful after needing to verify and do this step after a long time. Appreciate it.

 

Just one question, with the server hostnames already defined and domain set, if you change the Server name entries from GUI, do the certs need to be resigned. The certs already have FQDNs and I understand you need new certs only when changing the hostname from CLI. And I have seen you cannot append domain name to hostname from CLI.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: